Rename piwik to matomo
Block access to some piwik internals
Use a custom FPM pool for piwik.openstreetmap.org
Optimise loading of piwik javascript Serve it precompressed, and improve the cacheability.
Switch piwik to letsencrypt
Make piwik use default SSL configuration
Update piwik to apache 2.4 style access controls
Disable directory indeses over http as well
Redirect the piwik login page to https
Disable directory indexes for piwik
Add a load more cookbooks